home

tuvaustriahellas.gr

Domain Information

Server location:
Iraklion, Greece (GR)

ASN:
AS60342 TOPHOST-SOUTH Fragkoulis Maounis & Co. General Partnership (OE),GR

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Trojan.GenericKD.1517540, Trojan.GenericKD.1517016, Gen:Variant.Symmi.35738
100.00%

Norman
Obfuscated_J.OVR, Obfuscated_J.OVP, Gen:Variant.Symmi.35738, Suspicious_Gen4.ETTRO
100.00%

Trend Micro House Call
TROJ_GEN.R0C1H0AAP14, TROJ_SPNV.03AT14, TROJ_GEN.R047H07IB13, TROJ_NAPOLAR.NIL
100.00%

avast!
Win32:Malware-gen, Win32:Napolar-E [Cryp]
100.00%

Kaspersky
Trojan.Win32.Agent, Trojan.Win32.Yakes, Trojan-Dropper.Win32.Dapato
100.00%

Bitdefender
Trojan.GenericKD.1517540, Trojan.GenericKD.1517016, Trojan.Agent.BAEK, Gen:Variant.Symmi.35738
100.00%

Emsisoft Anti-Malware
Trojan.GenericKD.1517540, Trojan.GenericKD.1517016, Gen:Variant.Symmi.35738
100.00%

Comodo Security
UnclassifiedMalware, Backdoor.Win32.Agent.CXI4
100.00%

Avira AntiVirus
TR/TorSolar.A.13, TR/TorSolar.A.12, TR/Drop.Dapato.daqx.1, TR/Napolar.A.10
100.00%

Sophos
Mal/Generic-S, Virus 'Troj/Napolar-A'
100.00%

Microsoft Security Essentials
Trojan:Win32/Napolar.A, Threat.Undefined
100.00%

G Data
Trojan.GenericKD.1517540, Trojan.GenericKD.1517016, Trojan.Agent.BAEK, Gen:Variant.Symmi.35738
100.00%

Baidu Antivirus
Trojan.Win32.Napolar, Trojan.Win32.Yakes, Trojan.Win32.Agent
100.00%

IKARUS anti.virus
Virus.Win32.Cryptor, Trojan.Win32.Napolar, Trojan-Dropper.Win32.Dapato
100.00%

Fortinet FortiGate
W32/Agent.AEDVZ!tr, W32/Yakes.A!tr, W32/Dapato.DAQX!tr
100.00%

The domain tuvaustriahellas.gr has been seen to resolve to the following IP address.

185.4.135.51
linux417.grserver.gr
May 30, 2014

File downloads found at URLs served by tuvaustriahellas.gr.

38 / 68    (Malware)
http://tuvaustriahellas.gr/?iuwypu=09a019ab362f841622  (photo_016-www.facebook.com.exe)

40 / 68    (Malware)
http://tuvaustriahellas.gr/?8j8pgdxoma2r=1ff299  (lsass.exe)

24 / 68    (Malware)
http://tuvaustriahellas.gr/?rr23bd=3a487a6  ({840d7e90-e8e6-60ea-14c3-20a1840d7e90}.exe)

38 / 68    (Malware)
http://tuvaustriahellas.gr/?epgpj9jk8ax3a=fca44eadf065e1  (photo_016-www.facebook.com.exe)

33 / 68    (Malware)
http://tuvaustriahellas.gr/?3o7xquoe=0fca22f5359a024edad5  ({69fd7e70-c346-9070-bb28-c1c169fd7e70}.exe)

40 / 68    (Malware)
http://tuvaustriahellas.gr/?kkiy8zrx0gl=25bcaf72098cfb1e19b  (lsass.exe)

24 / 68    (Malware)
http://tuvaustriahellas.gr/?kpd4ew=79b8b73d23ce9e5  ({840d7e90-e8e6-60ea-14c3-20a1840d7e90}.exe)

24 / 68    (Malware)
http://tuvaustriahellas.gr/?cp1hdti21=3713c71d7135b  ({840d7e90-e8e6-60ea-14c3-20a1840d7e90}.exe)

33 / 68    (Malware)
http://tuvaustriahellas.gr/?8n8ux4kbg0cy=def07c06cfffddd3  ({69fd7e70-c346-9070-bb28-c1c169fd7e70}.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.